Mandriva Linux Security Advisory : joomla (MDVSA-2008:060)

Several severe security issues were discovered in the Joomla! PHP-based content management system. These issues have been fixed in version 1.0.15 which is provided with this update. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

CVE-2007-6644

Joomla! before 1.5 RC4 allows remote authenticated administrators to promote arbitrary users to the administrator group, in violation of the intended security model...

CVE-2007-6644

CVE-2007-6644 concerns Joomla! prior to version 1.5 RC4, where remote authenticated administrators could elevate arbitrary users to the administrator group, violating the intended security model. The description indicates an authenticated-admin privilege escalation vulnerability in the Joomla cor...